Sophos scopre il laboratorio AI per testare l’evasione degli EDR: così il ransomware si evolve
Sophos ha scoperto un laboratorio malware automatizzato usato da un gruppo ransomware attivo: agenti AI tra cui Claude Opus 4.5 e Cursor testavano tecniche di evasione EDR contro Sophos, CrowdStrike e Windows Defender, con 80 moduli e 70+ tecniche. Un caso senza precedenti di AI applicata allo sviluppo offensivo.
📰 Sophos Uncovers AI-Powered Malware Lab Built to Evade EDR Solutions
🤖 Rise of the AI-assisted hacker: Sophos uncovers a malware lab where a ransomware group uses AI (Claude Opus) to automate the creation of malware that evades top EDRs. This is the new frontier of the cybersecurity arms race. #AI #Malware #EDR #Sophos
🌐 cyber[.]netsecops[.]io
Additional resource:
There is a DEFCON talk about a 5+ year campaign by Chinese APTs targeting Sophos.
Watched the latest episode of Darknet Diaries.
It's an interesting hack case, and raising a dilemma of "security products".
As you watch this video, you gonna raise some eyebrows.
A:"Hmm, you guys can force updates?!"
"You guys can plant an implant to *spy* on us?!"
B: "But... without it, we can't get further information of these fucking nation state actors are doing to stop them"
"ALSO we are being transparent here"
https://www.youtube.com/watch?v=QzI9ig-DFoc
#cybersecurity #infosec #apt #sophosFirewall #sophos #spyware #darknetdiaries
Sophos Home Premium for Mac Review: Affordable Remote Security With Trade-Offs
Sophos Home Premium offers Mac antivirus protection at a low price, but it lacks independent testing lab verification and the advanced features found in the Windows edition.
Sophos Home Premium Review: Cloud-Managed Security at a Bargain Price
The affordable Sophos Home Premium expands on basic antivirus protection by integrating features from the company's enterprise-level solutions, with configuration managed remotely.
🆕 Here's how to deploy a Sophos firewall on VMware vCenter
https://thedxt.ca/2026/03/deploy-sophos-firewall-on-vmware-vcenter/
#VMware #vCenter #vExpert #Sophos #Firewall #Networking #SFOS @sophos
A virtual SFOS (Sophos Firewall Operating System) can run on many hypervisors, including VMware. In this post, I will show you step by step how to deploy a virtual SFOS on VMware vCenter. The Process There are two locations where you can download the Sophos firewall files. The first is the Sophos Firewall Installers... Read More Read More
🧑💻 Here's how to complete the initial setup of a Sophos firewall.
Before you can start using a Sophos firewall, you must complete the initial setup. In this post, I will show you step by step, how to complete the initial setup of a virtual SFOS (Sophos Firewall Operating System). The process will be similar on a physical Sophos firewall. Prerequisites The Process The default admin... Read More Read More
🗺️ When you setup a Sophos VM firewall on vSphere and add new interfaces the mappings go out the window.
Here's how to figure out the mappings.
https://thedxt.ca/2026/03/sophos-firewall-interface-mapping-on-vsphere/
#Sophos #Firewall #Interface #SFOS @sophos #Networking #VMware #vExpert
When you deploy a Sophos firewall on VMware vSphere, you start with 3 network interfaces PortA for LAN, PortB for WAN, and PortC is unassigned. In VMware vCenter, PortA is Network adapter 1, PortB is Network adapter 2, and PortC is Network adapter 3. However, when you add more network adapters in VMware vSphere,... Read More Read More
Tarnkappe.info
(in)sicurezza digitale
CyberNetsecIO
AmmarSpaces
Neil J. Rubenking
Daniel Keer